Senior Offensive Security Consultant - Remote-First PenTest

CypherLeap; Philippines; On-site; PHP 1,000,000 - 1,500,000; Full time

Job summary

CypherLeap is seeking a Senior Offensive Security Consultant to independently deliver complex offensive security engagements for international clients while contributing to the growth of our offensive security capability.

You will lead penetration testing across web, API, mobile, external, internal, AD, cloud and wireless security assessments, and produce executive-quality reports for CIOs and CISOs. Remote-first role with immediate joiner availability.

Qualifications

• 7+ years of hands-on offensive security consulting experience.
• Experience delivering services to international clients (Australian client experience highly desirable).
• Author of 50+ professional penetration testing reports.
• Excellent spoken and written English.
• Remote-first working environment.
• Certification and professional development support.

Responsibilities

• Lead penetration testing engagements from scoping through final reporting.
• Perform web, API, mobile, external, internal, Active Directory, cloud and wireless security assessments.
• Produce executive-quality reports requiring minimal review.
• Present findings to technical teams, CIOs, CISOs and executive stakeholders.
• Conduct remediation workshops and retesting.
• Support technical scoping, proposal development and effort estimation.
• Review work produced by junior consultants and provide mentoring.
• Contribute to the continuous improvement of CypherLeap's offensive security methodologies.

Skills

Client-facing

Presentation skills

English proficiency

Independence in engagements

Tools

Penetration testing tools

Kubernetes security

Automation scripting

Job description

CypherLeap is seeking a Senior Offensive Security Consultant to independently deliver complex offensive security engagements for international clients while contributing to the growth of our offensive security capability.

You will lead penetration testing across web, API, mobile, external, internal, AD, cloud and wireless security assessments, and produce executive-quality reports for CIOs and CISOs. Remote-first role with immediate joiner availability.